This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File:                     RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier:          RfJDLjTv2Ba4IMgxIdDsqKGMbQT+g776ux4DWwF+96M=
Subject key identifier:   36:EF:EB:17:86:73:09:11:BB:F5:41:38:A4:63:FF:F2:C0:DA:5D:E8
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer:       /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial:       019BF5E4029BA526D373DCA9AE847115557C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number:          17F2
Signing time:             Sun 25 Jan 2026 16:01:59 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:59 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:59 +0000
Files and hashes:         1: JQe-48FV5Y-itIVBDnGCRqGeVgA.roa (hash: S5b8k+IfVhZdFCKCEsxVom3++MXYD9JakutOwlvMZcA=)
                          2: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: 259ZKlD/bYc0++4JBkDjKKFRJimlw7c9iSZapeA+VA8=)
                          3: ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa (hash: uIgPK/yujRKyFi+4ZNmbB0CRvDlTsSwPRJk2iQzEWQU=)
                          4: rC0-8rrLIgHUERw1MQ4a8HsiTH4.roa (hash: 48aDi04DL3xSu0Qz3vO8DwV+zWYNyVlZoEWSWFScLzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e4:02:9b:a5:26:d3:73:dc:a9:ae:84:71:15:55:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
        Validity
            Not Before: Jan 25 16:01:59 2026 GMT
            Not After : Jan 26 16:01:59 2026 GMT
        Subject: CN=36efeb1786730911bbf54138a463fff2c0da5de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:23:c8:75:6e:33:cc:a2:d1:06:96:f6:30:
                    30:57:28:9b:37:ba:2f:3b:eb:bf:cd:a6:8c:de:55:
                    33:fd:e0:cb:91:ad:4c:ea:f3:07:a8:48:99:74:6d:
                    69:95:8f:1b:3e:2c:ec:81:13:51:00:25:4d:5a:b5:
                    01:34:6a:46:f2:a4:ed:d1:17:dc:ba:1e:6e:b0:bf:
                    2c:bd:e4:ba:67:dd:8e:50:03:b2:9e:1a:af:38:72:
                    92:a5:e9:17:bc:d3:f0:04:f5:b6:15:ce:b6:12:ba:
                    cc:b8:85:85:4e:01:40:33:0a:0f:98:1e:f2:c3:a5:
                    7f:62:a5:62:af:eb:e6:5c:f9:1f:9c:8b:98:df:f3:
                    f0:36:97:71:70:d0:0e:1a:5b:99:b5:eb:bc:f2:43:
                    89:ce:e6:f1:1b:70:b2:36:1d:fa:ac:dc:73:18:34:
                    2e:5d:8c:0c:c4:d1:0a:7d:17:fa:66:ed:9a:ba:76:
                    47:75:3b:39:52:3b:51:b5:5c:fb:86:89:e1:9c:0c:
                    01:90:7f:e3:36:89:95:f4:7d:2b:1f:02:cb:75:1e:
                    72:69:b3:8d:3e:2e:3a:2f:f9:91:25:8f:3a:12:16:
                    02:c8:ac:93:56:ae:a6:4e:19:7e:c4:f3:fa:9b:e8:
                    48:6c:ad:46:18:9e:db:56:89:59:c9:7f:5d:0a:d5:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:EB:17:86:73:09:11:BB:F5:41:38:A4:63:FF:F2:C0:DA:5D:E8
            X509v3 Authority Key Identifier:
                keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:72:75:41:b5:2e:55:b4:b3:6e:37:93:12:99:c6:5e:16:cf:
         36:3b:33:9a:1b:19:93:0b:d5:cd:c6:69:28:22:19:4e:87:09:
         bb:fe:17:b6:8d:e7:7d:60:50:3f:9f:bb:64:f1:ed:f9:4a:98:
         0e:fb:da:00:19:20:1e:31:6b:8e:e2:d9:57:0a:dd:4e:9f:18:
         d5:89:cf:fe:1f:2e:60:68:9e:b1:d0:72:47:5c:5a:52:64:6b:
         78:b9:b4:a2:52:64:cb:af:ab:67:e6:31:50:75:2f:db:77:84:
         75:ec:d7:41:20:67:c6:fc:ff:4e:2c:d3:a9:98:15:52:c8:33:
         68:90:e4:9a:99:40:4d:b4:1d:84:28:48:df:04:31:6d:83:6d:
         ea:87:0c:5c:c3:ce:17:e0:35:28:d3:c9:0f:4d:3b:11:70:aa:
         8e:52:a0:6a:32:fb:3f:98:5c:46:b3:b6:39:c7:8f:59:8d:84:
         a7:35:a4:5e:ce:15:0b:2d:5e:9a:24:06:c1:56:67:2b:12:29:
         7f:59:a5:df:87:77:22:18:df:d5:d3:db:f5:71:c9:06:7e:58:
         dd:5d:5a:f9:44:b7:3e:9a:ec:5a:dc:a6:a9:f0:2a:1e:30:9c:
         a7:3a:f4:9a:21:ba:1c:52:f1:11:05:09:34:e2:a6:33:54:37:
         20:06:5c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv15AKbpSbTc9yproRxFVV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjYwMTI1MTYwMTU5WhcNMjYwMTI2MTYwMTU5WjAzMTEwLwYDVQQD
EygzNmVmZWIxNzg2NzMwOTExYmJmNTQxMzhhNDYzZmZmMmMwZGE1ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWIjyHVuM8yi0QaW9jAwVyibN7ov
O+u/zaaM3lUz/eDLka1M6vMHqEiZdG1plY8bPizsgRNRACVNWrUBNGpG8qTt0Rfc
uh5usL8sveS6Z92OUAOynhqvOHKSpekXvNPwBPW2Fc62ErrMuIWFTgFAMwoPmB7y
w6V/YqVir+vmXPkfnIuY3/PwNpdxcNAOGluZteu88kOJzubxG3CyNh36rNxzGDQu
XYwMxNEKfRf6Zu2aunZHdTs5UjtRtVz7honhnAwBkH/jNomV9H0rHwLLdR5yabON
Pi46L/mRJY86EhYCyKyTVq6mThl+xPP6m+hIbK1GGJ7bVolZyX9dCtUGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbv6xeGcwkRu/VBOKRj//LA2l3oMB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3J1QbUu
VbSzbjeTEpnGXhbPNjszmhsZkwvVzcZpKCIZTocJu/4Xto3nfWBQP5+7ZPHt+UqY
DvvaABkgHjFrjuLZVwrdTp8Y1YnP/h8uYGiesdByR1xaUmRreLm0olJky6+rZ+Yx
UHUv23eEdezXQSBnxvz/TizTqZgVUsgzaJDkmplATbQdhChI3wQxbYNt6ocMXMPO
F+A1KNPJD007EXCqjlKgajL7P5hcRrO2OcePWY2EpzWkXs4VCy1emiQGwVZnKxIp
f1ml34d3Ihjf1dPb9XHJBn5Y3V1a+US3PprsWtymqfAqHjCcpzr0miG6HFLxEQUJ
NOKmM1Q3IAZc3g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:44 2026 by rpki-client